From 8d07583f3920f27186ccc16ea1ecb49104f1e32d Mon Sep 17 00:00:00 2001 From: thomascube <thomas@roundcube.net> Date: Fri, 18 May 2007 07:29:25 -0400 Subject: [PATCH] Use HTTP-POST requests for actions that change application state --- CHANGELOG | 576 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 575 insertions(+), 1 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 10ca155..2ab885f 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,6 +1,581 @@ CHANGELOG RoundCube Webmail --------------------------- +2007/05/18 (thomasb) +---------- +- Use HTTP-POST requests for actions that change state + + +2007/05/17 (thomasb) +---------- +- Updated Catalan, Russian, Portuguese, Slovak and Chinese translations +- Renamed localization folder for Chinese (Big5) +- Chanegd Slovenian language code from 'si' to 'sl' +- Added Sinhala (Sri-Lanka) localization +- Use global filters and bind username/ for Ldap searches (#1484159) +- Hide quota display if imap server does not support it +- Hide address groups if no LDAP servers configured +- Add link to message subjects (closes #1484257) +- Better SQL query for contact listing/search (closes #1484369) + + +2007/05/13 (thomasb) +---------- +- Updated Norwegian (bokmal), Czech, Danish and Portuguese (standard) translation +- Fixed marking as read in preview pane (closes #1484364) +- CSS hack to display attachments correctly in IE6 +- Wrap message body text (closes #1484148) + + +2007/05/03 (yllar) +---------- +- Updated French, Lithuanian, Armenian, Spanish and Italian translations + + +2007/05/01 (thomasb) +---------- +- Updated German, Euskara, Hungarian, Romanian and Spanish translation +- Added Hindi and Kurdish localization + + +2007/04/28 (thomasb) +---------- +- LDAP access is back in address book (closes #1484087) +- Added search function for contacts +- New Template parsing and output encoding +- Fixed bugs #1484119 and #1483978 + + +2007/04/08 (thomasb) +---------- +- Fixed message moving procedure (closes #1484308) +- Fixed display of multiple attachments (closes #1466563) +- Fixed check for new messages (closes #1484310) +- List attachments without filename + + +2007/03/27 (thomasb) +---------- +- New session authentication: Change sessid cookie when login, authentication with sessauth cookie is now configurable. + Should close bugs #1483951 and #1484299 + + +2007/03/23 (thomasb) +---------- +- Correctly translate mailbox names (closes #1484276) +- Quote e-mail address links (closes #1484300) + + +2007/03/21 (thomasb) +---------- +- Updated PEAR::Mail_mime package +- Added Persian localization +- Updated Catalan and Brazilian Portuguese translations +- Updated INSTALL manual with a note about database passwords +- Accept single quotes for HTML attributes when modifying message body (thanks Jason) +- Sanitize input for new users/identities (thanks Colin Alston) + + +2007/03/19 (thomasb) +---------- +- Don't download HTML message parts +- Convert HTML parts to plaintext if 'prefer_html' is off +- Correctly parse message/rfc822 parts (closes #1484045) +- Code cleanup + + +2007/03/18 (thomasb) +---------- +- Also use user_id for unique key in messages table (closes #1484074) +- Hide contacts drop down on blur (closes #1484203) +- Make entries in contacts drop down clickable +- Turn off browser autocompletion on login page +- Quote <? in text/html message parts +- Hide border around radio buttons +- Replaced old JS function calls. + + +2007/03/13 (thomasb) +---------- +- Applied patch for attachment download by crichardson (closes #1484198) +- Fixed bug in Postgres DB handling (closes #1484068) +- Fixed bug of invalid calls to fetchRow() in rcube_db.inc (closes #1484280) +- Fixed array_merge bug (closes #1484281) +- Fixed flag for deletion in list view (closes #1484264) +- Finally support semicolons as recipient separator (closes ##1484251) +- Fixed message headers (subject) encoding + + +2007/03/04 (tomekp) +---------- +- check if safe mode is on or not (closes #1484269) + + +2007/03/02 (thomasb) +---------- +- Show "no subject" in message list if subject is missing (closes #1484243) +- Solved page caching of message preview (closes #1484153) +- Only use gzip compression if configured (closes #1484236) + + +2007/02/25 (estadtherr) +---------- +- Fixed priority selector issue (#1484150) +- Upgraded to TinyMCE v2.1.0 + + +2007/02/21 (thomasb) +---------- +- Fixed some CSS issues in default skin (closes #1484210 and #1484161) +- Prevent from double quoting of numeric HTML character references (closes #1484253) + + +2007/02/07 (tomekp) +---------- +- Updated (bg) translation (Doichin Dokov) + + +2007/02/06 (tomekp) +---------- +- Updated (pl) translation +- Updated (pt_BR) translation (Robson F. Ramaldes) +- Big cleanup in program/localization + + +2007/02/05 (thomasb) +---------- +- Updated Italian, Slovenian, Greek, Bulgarian, Hungarian and Croatian translation + + +2007/01/07 (estadtherr) +---------- +- Fixed display of HTML message attachments (closes #1484178) + + +2007/01/07 (thomasb) +---------- +- Applied patch for preview caching (closes #1484186) +- Added Thai and Vietnamese localization files + + +2006/12/29 (thomasb) +---------- +- Added error handling for attachment uploads +- Use multibyte safe string functions where necessary (closes #1483988) +- Updated Swiss German localization (de_CH) + + +2006/12/22 (thomasb) +---------- +- Applied security patch to validate the submitted host value (by Kees Cook) +- Applied security patch to validate input values when deleting contacts (by Kees Cook) +- Applied security patch that sanitizes emoticon paths when attaching them (by Kees Cook) +- Applied a patch to more aggressively sanitize a HTML message +- Visualize blocked images in HTML messages + + +2006/12/20 (thomasb) +---------- +- Fixed wrong message listing when showing search results (closes #1484131) +- Introduced functions Q() and JQ() as aliases for rep_specialchars_output() +- Show remote images when opening HTML message part as attachment + + +2006/12/17 (thomasb) +---------- +- Added patch by Ryan Rittenhouse & David Glick for a resizeable preview pane + + +2006/12/06 (thomasb) +---------- +- Improve memory usage when sending mail (closes #1484098) +- Mark messages as read once the preview is loaded (closes #1484132) +- Include smtp final response in log (closes #1484081) + + +2006/12/04 (thomasb) +---------- +- Corrected date string in sent message header (closes #1484125) +- Correclty choose "To" column in sent and draft mailboxes (closes #1483943) +- Changed srong tooltips for message browse buttons (closes #1483930) + + +2006/12/03 (estadtherr) +---------- +- Added fix to convert HTML signatures for plain text messages +- Fixed signature delimeter character to be standard (Bug #1484035) + + +2006/12/01 (thomasb) +---------- +- Implemented preview pane +- Fixed XSS vulnerability (Bug #1484109) +- Remove newlines from mail headers (Bug #1484031) +- Selection issues when moving/deleting (Bug #1484044) +- Applied patch of Clement Moulin for imap host auto-selection +- ISO-encode IMAP password for plaintext login (Bugs #1483977 & #1483886) +- Fixed folder name encoding in subscription list (Bug #1484113) +- Fixed JS errors in identity list (Bug #1484120) +- Show client debug console on debug_level 8 +- Added Serbian translation +- Updated Spanish and Bulgarian localization + + +2006/11/22 (robin) +---------- +- Fix a bug introduced with Shift-Del yesterday + + +2006/11/21 (robin) +---------- +- Add missing nl_NL translations +- Translate foldernames in folder form (closes #1484113) + + +2006/11/21 (robin) +---------- +- Added first and last buttons to message list, address book + and message detail +- Pressing Shift-Del bypasses Trash folder +- Enable purge command for Junk folder + + +2006/11/17 (robin) +---------- +- Re-initialize message list after shift-select and delete + + +2006/11/16 (robin) +---------- +- Fixed updating message list after expunge and purge +- Fetch all aliases if virtuser_query is used instead + of only the first one + + +2006/11/11 (estadtherr) +---------- +- fixed deletion/moving of messages from within "show" page + + +2006/11/09 (thomasb) +---------- +- Little bugfix in HTML encoding +- Fixed encoding issues and delete-on-reply problem +- Corrected template parsing + + +2006/11/07 (estadtherr) +---------- +- Upgraded to TinyMCE v2.0.8 +- Fixed CSS path for editor popups + +2006/09/26 (estadtherr) +---------- +- Added spellchecker plugin to TinyMCE configuration +- Fixed HTML/Plain toggle labels + + +2006/09/24 (thomasb) +---------- +- Partial client re-write with a common list class +- Re-enabled multi select of contacts (Bug #1484017) +- Enable contact editing right after creation (Bug #1459641) +- Updated Hungarian, Estonian and Traditional Chinese localization + + +2006/09/19 (thomasb) +---------- +- Correct UTF-7 to UTF-8 conversion if mbstring is not available + + +2006/09/13 (estadtherr) +---------- +- Introduction of TinyMCE HTML editor support for message composition and signatures + Note : a new column is added to the "identities" database table + + +2006/09/12 (estadtherr) +---------- +- Fixed html2text treatment of table headers (Bug #1484020) +- Fixed IMAP fetch of message body (Bug #1484019) + + +2006/09/08 (thomasb) +---------- +- Fixed safe_mode problems (Bug #1418381) +- Fixed wrong header encoding (Bug #1483976) + + +2006/09/07 (thomasb) +---------- +- Made automatic draft saving configurable +- Fixed JS bug when renaming folders (Bug #1483989) +- Don't wait for complete page load when calling JavaScript init() +- Some improvements to prevent session expiration +- Prevent from double submit of spell check requests + + +2006/09/01 (thomasb) +---------- +- Imporoved message parsing and HTML validation +- Added quota display as image (by Brett Patterson) +- Corrected creation of a message-id +- Updated Norwegian (bokmal) localization + + +2006/08/30 (thomasb) +---------- +- New indentation for quoted message text +- Improved HTML validity + + +2006/08/28 (estadtherr) +---------- +- Fixed URL character set (Ticket #1445501) +- Fixed saving of contact into MySQL from LDAP query results (Ticket #1483820) + + +2006/08/25 (thomasb) +---------- +- Fixed folder renaming: unsubscribe before rename (Bug #1483920) +- Finalized new message parsing (+ chaching) +- Updated SQL scripts and UPGRADING instructions + + +2006/08/23 (thomasb) +---------- +- Updated Polish, Portuguese, Latvian, Chinese and Japanese localization + + +2006/08/20 (thomasb) +---------- +- Fixed wrong usage of mbstring (Bug #1462439) +- Set default spelling language (Ticket #1483938) +- Added support for Nox Spell Server + + +2006/08/18 (thomasb) +---------- +- Re-built message parsing (Bug #1327068) + Now based on the message structure delivered by the IMAP server. +- Fixed some XSS and SQL injection issues + + +2006/08/10 (thomasb) +---------- +- Fixed charset problems with folder renaming + + +2006/08/04 (thomasb) +---------- +- Fixed Bug in saving identities (Ticket #1483915) +- Set folder name in window title (Bug #1483919) +- Don't add imap_root to INBOX path (Bug #1483816) +- Attempt to create default folders only after login +- Avoid usage of $CONFIG in rcube_imap class + + +2006/07/30 (thomasb) +---------- +- Alter links in HTML messages (Bug #1326402) +- Added fallback if host not found in 'mail_domain' array +- Applied patch of Charles to highlight droptargets (Ticket #1473034) +- Fixed folder renaming (Bug #1483914) +- Added confirmation message after deleting a folder + + +2006/07/25 (thomasb) +---------- +- Made folder renaming a bit more ajax-style +- Changed rename-labels and German translation +- Fixed addressbox countbar width (Bug #1483845) +- Fixed refresh interval problems in Safari (Bug #1483902) +- Fixed clear_message_list_header() errors (Bug #1483898) +- Sanity check of $message_set in imap.inc (Bug #1443200) +- Added correct changing of message list headers for Sent folder +- Updated Spanish localization (Ticket #1483887) +- Applied patch #1483846 + + +2006/07/24 (richs) +---------- +- Draft window no longer reloads. It saves to an iframe in the background instead (fixes bug #1483869) +- Draft timer now part of program/js/app.js instead of skins/default/templates/compose.inc +- Draft saving now properly returns an error when saving fails +- Draft timer stops and resets properly when attachments are uploaded, or when saving manually +- Old compose session/attachments are now cleaned up when a new/forward/reply/draft is made/opened + + +2006/07/19 (thomasb) +---------- +- Correct entity encoding of link urls (HTML validity) +- Improved usability in compose step (Ticket #1483807) +- Added absolute URLs to several buttons (for "open in new window") +- Applied patch #1328032 +- Fixed Bug/Patch #1443200 + + +2006/07/18 (thomasb) +---------- +- Fixed password with spaces issue (Bug #1364122) +- Replaced _auth hash with second cookie (Ticket #1483811) +- Don't use get_input_value() for passwords (Bug #1468895) +- Made password encryption key configurable +- Minor bugfixes with charset encoding +- Added <label> tags to forms (Ticket #1483810) + + +2006/07/07 (thomasb) +---------- +- Fixed INSTALL_PATH bug #1425663 + + +2006/07/03 (richs) +---------- +- Fixed compatibility with in-body email addresses containing "+" (Bug #1483836) +- Updated French localizations (Ticket #1483862) +- Incoming messages can now be moved to Drafts, edited, saved, then moved back (Feature #1436191) +- Added Firefox workaround when clicking whitespace to drag messages (Bug #1483857) +- Corrected Dutch and Italian localizations (Ticket #1483851 and #1483848) +- Enabled 'Empty' (purge) command for Junk mailbox (defined in main.inc.php) + + +2006/06/30 (richs) +---------- +- Fixed empty INBOX compatibility bug (Patch #1443200) +- Temporarily fixed French "compact" localization (Patch #1483862) +- Fixed "Select All" not working with Delete interface button (Bug #1332434) +- Fixed messsage list column compatibility with Konqueror (Bug #1395711) +- Fixed "unread count" in window title when count changed (Bug #1483812) +- Fixed DB error when deleting from message table (Patch #1483835) + + +2006/06/29 (richs) +---------- +- Added ability to remove attachments (Feature #1436721) +- Default folders are now auto-created on first login (Feature #1471594) +- Fixed compatibility with folder apostrophes (e.g.: Joe's Folder) (Bug #1429458) +- Corrected Italian localizations +- Tweaked rename-folder form to clear after a rename + + +2006/06/26 (richs) +---------- +- Added button to immediately check for new messages +- New message checking now displays status "Checking for new messages..." +- New message checking now looks for unread messages in all mailboxes (Feature #1326401) +- Task buttons now respond to clicks by darkening (as in other applications) +- Fixed "Sender" column changing to "Recipient" for "Sent" and "Drafts" message lists +- Added ability to sort messages by "Size" +- Added ability to rename folders (Feature #1326396) +- Added 'protect_default_folders' option to main.inc.php to prevent renames/deletes/unsubscribes of default folders +- Corrected 5 typos of "INSTLL" to "INSTALL" in program/include/main.inc + + +2006/06/25 +---------- +- Changed behavior to include host-specific configuration (Bug #1483849) +- Assume ISO-8859-1 encoding of mail messages by default (Patch #1483839) +- Fixed spell checker to work with the new URL at google.com +- Some memory and security optimizations sendmail.inc +- Updated UGRADING description + + +2006/06/19 +---------- +- Added Drafts support (Feature #1326839) (richs) + + +2006/06/02 +---------- +- Updated Estonian localization and moved from ee to et +- Added Bulgarian localization + + +2006/05/25 +---------- +- Finalized GoogieSpell integration + + +2006/05/18 +---------- +- Added Arabic and Armenian localizations +- Updated Russian localization +- Removed MDB2 classes from repository. Install them seperately if used. +- Updated MDB2 wrapper class contributed by Lukas Kahwe Smith +- Allow & in e-mail addresses + + +2006/05/05 +---------- +- Fixed typos in function rcube_button() (Bugs #1473198 and #1473201) +- Check for zlib.output_compression before using ob_gzhandler (Bug #1471069) +- Casting date parts in iil_StrToTime() to avoid warnings (Bug #1482140) +- Corrected INSTALL description (Bug #1476106) +- Added charset to javascript HTTP headers +- Fixed Opera bug with CC and BCC fields (Bug #1474576) +- Changed login page title regarding product name (Bug #1476413) +- Pimped search function +- Applied attachment viewing/forwarding patches by Andrew Fladmark +- Applied prev/next patch by Leonard Bouchet +- Applied patches by Mark Bucciarelli +- Applied patch for requesting receipts by Salvatore Ansani +- Integrated GoogieSpell as suggested by phil (styling is not perfect yet, localization is missing) + + +2006/04/13 +---------- +- Added Slovenian localization +- Updated Portuguese localization +- Fixed parent.location problem for compose-links +- Added sort order saving patch by Jacob Brunson +- Added gzip compression support + + +2006/04/02 +---------- +- Added Lithuanian localization +- Improved search function +- Added version string as template object +- Load host-specific configuration file (see config/main.inc.php) +- New config parameter adding domain to user names for login +- Strip tags on _auth, _action, _task parameters +- Corrected labels for next/previous page buttons in address book + + +2006/03/23 +---------- +- Auto-detect mail header delimiters +- Regard daylight savings +- Localized quota display +- Started implementing search function + + +2006/03/20 +---------- +- Avoid error message when saving an unchanged identity (Bug #1429510) +- Fixed hard-coded cols selection for sent folder (Bug #1354586) +- Enable some HTML links for use with "open in new window" or "save target" +- Check meta-key instead of ctrl on Macs +- Ignore double clicks when holding down a modifier key +- Fixed reloading of the login page +- Fixed typo in compose template (Bug #1446852) +- Added compose button to message read step (Request #1433288) +- New config parameter for persistent database connections (Bug #1431817) + + +2006/03/14 +---------- +- Don't remove internal HTML tags in plaintext messages +- Improved error handling in DB connection failure + + +2006/02/22 +---------- +- Updated localizations +- Fixed bug #1435989 + + 2006/02/19 ---------- - Updated localizations @@ -11,7 +586,6 @@ - Added support for mbstring module by Tadashi Jokagi - Added function for automatic remove of slashes on GET and POST vars if magic_quotes is enabled - 2006/02/05 -- Gitblit v1.9.1